Hello,
While I was working on MySQL authentication using libpam-mysql, I came up with these two packages: libnss-mysql and libnss-mysql-bg
According to the package definitions:
Quote:
root@debian:~# aptitude show libnss-mysql
Package: libnss-mysql
State: installed
Automatically installed: no
Version: 1.0-4+b1
Priority: optional
Section: admin
Maintainer: Guillaume Morin <gemorin@debian.org>
Uncompressed Size: 160 k
Depends: libc6 (>= 2.3.2), libmysqlclient16 (>= 5.1.36), zlib1g (>= 1:1.1.4)
Suggests: mysql-server
Conflicts: libnss-mysql-bg
Description: NSS module for MySQL
This package provides a Name Service Switch module that allows your MySQL
server act as a name service. It currently features full account support
(shadow, passwd and group).
|
and
Quote:
root@debian:~# aptitude show libnss-mysql-bg
Package: libnss-mysql-bg
State: not installed
Version: 1.5-2
Priority: optional
Section: admin
Maintainer: Emmanuel Lacour <elacour@home-dn.net>
Uncompressed Size: 184 k
Depends: libc6 (>= 2.2.5), libmysqlclient16 (>= 5.1.36), zlib1g (>= 1:1.1.4)
Suggests: mysql-server, libpam-mysql
Conflicts: libnss-mysql
Description: NSS module for using MySQL as a naming service
libnss-mysql-bg provides a Name Service Switch module that allows MySQL to act
as a name service.
Its configuration is very flexible by allowing to set an SQL query per NSS call
(getpwnam, getpwuid, ...). You would use it instead of the other "libnss-mysql"
package for building an NSS over an existing database (used for another purpose
like groupware, ...).
It currently supports storage of passwd, group and shadow informations.
|
I really wonder what is the exact difference of these packages rather than using the "bg" one on an existing database. What causes an existing database to fail libnss-mysql (not the
bg one)? What if I use libnss-mysql-bg for my
new user database? What are the disadvantages of not using libnss-mysql?
Thanks
Edit: I am testing libnss-mysql for now and I can configure it for my purposes, using with libpam-mysql. I think the "bg" package has much more to do. I always think that nsswitch and pam works together and I am now thinking there is a real difference between them. Am I right? or wrong?